d1eb4d088071ffa4ca7998f3d5a75b4d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d1eb4d088071ffa4ca7998f3d5a75b4d_JaffaCakes118
Size

160KB
MD5

d1eb4d088071ffa4ca7998f3d5a75b4d
SHA1

d312a9a7f261050382d1f50daf4cba226289a662
SHA256

fe1d5f9f7cf2dbceea0fcb6751faa79331cc0629d9a4a72cf21845576b3b9d04
SHA512

83c6d221ba7cada23903a751f57e0c7cc1291d1bd67c0f30381c8aee63776ed8ebb01f13e097fea36b7c3c81c90d7fd8730ff3e88817e028e23f0150ea785673
SSDEEP

3072:2HJQqjusASu0KsQ/J8bkAjHZcOCr0hb4PWJyggJFEeS:2HSqLd/d9LCr80NF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1eb4d088071ffa4ca7998f3d5a75b4d_JaffaCakes118

Files

d1eb4d088071ffa4ca7998f3d5a75b4d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e5cacf8649fdf5b93d0d1b7f7aa8b66c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\nItAkdveudsz\hQdMEomy\ufTozxdTn\pzptjyzHdMtue.pdb

Imports

user32

FindWindowA
GetActiveWindow
GetMenuState
IsWindowVisible

shlwapi

StrCmpNW

kernel32

GetWindowsDirectoryA
SetEvent
CreateWaitableTimerA
LoadLibraryA
AddAtomW
GetFileInformationByHandle
MoveFileW
ReleaseSemaphore
LocalReAlloc
GetLongPathNameW
CreateFileA
SizeofResource
GetModuleFileNameW
GetCurrentThreadId

Exports

Exports

?BetterPointerRe

Sections

.text
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfhgfh
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfhf
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uiyytg
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bgv
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iuouyt
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5cacf8649fdf5b93d0d1b7f7aa8b66c

Headers

File Characteristics

PDB Paths

Imports

user32

shlwapi

kernel32

Exports

Exports

Sections

.text Size: 134KB - Virtual size: 134KB

.data Size: 15KB - Virtual size: 15KB

.gfhgfh Size: 512B - Virtual size: 44B

.gfhf Size: 512B - Virtual size: 32B

.uiyytg Size: 512B - Virtual size: 110B

.bgv Size: 512B - Virtual size: 32B

.iuouyt Size: 512B - Virtual size: 32B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 134KB - Virtual size: 134KB

.data
Size: 15KB - Virtual size: 15KB

.gfhgfh
Size: 512B - Virtual size: 44B

.gfhf
Size: 512B - Virtual size: 32B

.uiyytg
Size: 512B - Virtual size: 110B

.bgv
Size: 512B - Virtual size: 32B

.iuouyt
Size: 512B - Virtual size: 32B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 2KB - Virtual size: 2KB